MAL-2025-71558 Malicious code in wet-black-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257acdbc69da100c14073df4ea73f72e7fb7e3e6f815b1974e3439680a52b43b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70116 Malicious code in puzzled-olive-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2eb697643089c881fe8ef8d740df7783292be65b2a331c4191f4524afa98d07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70128 Malicious code in quarrelsome-chocolate-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3650bf43c5209267f01d830ea9601eff058cc699fd68d00f4d84c0549c8b8167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70564 Malicious code in shaky-salmon-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d26238dcc9fbe4732586676036dffcf23aeb8ec69ee779719f0d66383bd3eb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67701 Malicious code in delicious-amaranth-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f678a35f7899a5000e4c38699729a434ecf46b8595e6b389250e7b2446978a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70431 Malicious code in rubber-plum-dinosaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f2cb293c3e9b155198b19825e766b2baaa70fa6c95e79c1ce1450bfb95c17f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71431 Malicious code in vertical-tan-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6891ce3f3cdc86cbc11874359df91f55be147e36783a5e63106eb26827ff876e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69396 Malicious code in military-rose-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 537a3ae891c7dcb8daaa75f1cf813778384c76580eb3231d208a1ed94290f0a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68455 Malicious code in functional-fuchsia-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9cfb1a2c0ba9dd90e0f80f4e706aa77d4c328ed49db749bb6d8df4f63b81946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70370 Malicious code in retail-magenta-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22fa05c467f2494cdef9107f31830567d3299b73cc7ee3f21b2fb98bb1979bd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69870 Malicious code in persistent-beige-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39a801573b48932b8e64c285db902a0b5407607008fec4583c661922b0e33661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68241 Malicious code in fancy-beige-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d49d50cc1f6ed3eb792e1d46af6ae800cac80c3e9e1a2e7ffb6c43b79fd270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68626 Malicious code in handicapped-apricot-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 441db44263c50a582bd54af265f0bdaee2aea2de081a7119e74afff4ca5d667a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69364 Malicious code in mental-turquoise-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5bea37d9ebdabcb541c0dbd5823ab75a5d1b6ca4d5a398facce1348448c7a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67195 Malicious code in circular-coral-urial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97dfd478ab56bb5352c63eb299c5e1b5247d740748ddff4edc9bcf16cb7a0904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70334 Malicious code in required-amaranth-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2982061858556261e614e1b43d33f94fa04b447fe5d9e59e1677dbec2ed6f793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69333 Malicious code in mean-indigo-ocelot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fb84664495c91023ad22cea576ed9438a8120d83b8a0c9420b6d66a6f6d0ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68818 Malicious code in improved-olive-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9458d41275be0abd6cfe5283943576b594f9982917d5b8d2acea23b25600ad05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67769 Malicious code in dirty-bronze-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa8b3672e79c743ef6a768816b5935d376af08ef3ad1646edef80de5df3a3b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exuberant-olive-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b8d6192a0962670d25b0f717eb9fcde0fc068d70bb85345189cc0204877d15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...